jaycob.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2c:4c:e8:a2:d4:a2:3f:f9:9d:9f:ec:cb:d1:c4:0f:b9:a1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jaycob.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2c:4c:e8:a2:d4:a2:3f:f9:9d:9f:ec:cb:d1:c4:0f:b9:a1
Serial Number (int): 276411511182949806175899948382145309817249
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:d4:b8:36:cf:ab:16:5a:c4:b7:40:c8:b3:1e:71:27:b4:98:a6:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:0e:db:68:f9:de:5d:f6:5c:f3:9c:9f:d2:f0:aa:97:25:ba:eb:42
Fingerprint (sha256): d2:02:18:e0:b6:ef:92:26:7d:2a:60:18:9d:33:59:ba:22:33:cd:e4:8d:a3:9c:22:39:16:e7:a4:d1:30:ac:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jaycob.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jaycob.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jaycob.org

Other certificates including the domain name jaycob.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for jaycob.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276411511182949806175899948382145309817249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 14:37:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 14:37:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaycob.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825871017878640053157088965090309674920944910961837715343508078868525366475152847339683447428752330154265175391784546785808380701255783625719099198082493143409807825934215277669950630754450181909175030174569594553425674052466558815607481244352159534180783891319539536300123681758563597257228753467390890553315797207736855932152688145148418228990631094572026739238875230294482375314384529148753295896366877465189705357162792165448185444935115871985267893060792308295635448231222599542695103592672484852100167234858859844508567439086267412063464907575796117719736681925903759739842041547157791377529701331394733829146679852286829030654358219327093299803899427241764658673315821764445166235052274920403772243045398330098718636807641932221524363185769300361204013280919595608467805599484069825549690572502636816230493946868233195206383042014516623444979634250007379639031826825966976106896880369446855494174415379702885705359854067789902698945216571752560914521659386339387569915569430080185807210669538053959603274847219492979872804522029181173816083342512217594925787664915824250257741599662260352483581736609621628167773943374296121487378301167549980778116677655465818161685150051849435698553004393798179425954966800671919576597077149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dd4b836cfab165ac4b740c8b31e7127b498a6a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaycob.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ca5606b2800000403004730450221009cf48d46d70c9eac1ddbb25cc22852897ca300eff83cb1899228089538774f1102203d6ac22625cbca53c7ef475f0dabd14ffe7094c5114b998f3ff0e4a6e3fd26e4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca5606b260000040300483046022100d14c0ec8e31f7abaf27aa2a2b194636ae27169c65e60f39630e43f37e19ae7c3022100812bdd86496ffba4576f8e641f665fcd110c8f0e666d3a969be495f0d5b1b4be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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